GitLab EE 11.11 and later through 12.7.2 allows Directory Traversal.
{
"versions": [
{
"introduced": "11.11.0"
},
{
"fixed": "12.5.9"
},
{
"introduced": "12.6.0"
},
{
"fixed": "12.6.6"
},
{
"introduced": "12.7.0"
},
{
"last_affected": "12.7.2"
}
]
}